[strongSwan] Confused about Mac OS X IKEv2 config

Felipe Arturo Polanco felipeapolanco at gmail.com
Mon Jan 13 19:28:09 CET 2020


Hello,

I'm trying to set up a strongswan client for an IKEv2 server that works
fine over Mac OS.

They provide this mobileconfig setting but I'm confused since they are
using PSK and Username+password at the same time, does Mac OS X support
multiple authentication rounds in IKEv2?
How would this file translate to a swanctl config?

<key>IKEv2</key>
        <dict>
          <key>RemoteIdentifier</key>
          <string>myvpn.com</string>
          <key>AuthenticationMethod</key>
          <string>SharedSecret</string>
          <key>SharedSecret</key>
          <string>00000000</string>
          <key>LocalIdentifier</key>
          <string>john003</string>
          <key>RemoteAddress</key>
          <string>myvpn.com</string>
          <key>ExtendedAuthEnabled</key>
          <integer>1</integer>
          <key>AuthName</key>
          <string>john003</string>
          <key>AuthPassword</key>
          <string>changeme</string>

Thanks,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20200113/792440ea/attachment.html>


More information about the Users mailing list